ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

This week's threat bulletin underscores how unpatched IoT devices, internet-exposed critical infrastructure, and weak authentication practices are being actively weaponized at scale. A 296,000-device IoT botnet demonstrates the devastating consequence of deploying devices without hardening or ongoing patch management. The targeting of over 100 water systems highlights that operational technology (OT) and critical infrastructure remain dangerously exposed when not properly segmented from the internet. Meanwhile, the JWR phishing framework and MFA push abuse attacks show that even organizations with multi-factor authentication can be compromised when users lack the awareness to identify and reject fraudulent authentication prompts. Trojanized productivity apps further illustrate the growing supply chain and social engineering risk surface that defenders must address holistically.